Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criu-develUpgrade toolboxUpgrade podman-pluginsUpgrade skopeo-testsUpgrade golang-testsUpgrade delveUpgrade containers-commonUpgrade grafanaUpgrade skopeoUpgrade podmanUpgrade podman-remoteUpgrade golang-binUpgrade python3-podmanUpgrade containernetworking-pluginsUpgrade conmonUpgrade container-selinuxUpgrade libslirp-develUpgrade grafana-pcpUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade golang-raceUpgrade crunUpgrade criuUpgrade golang-srcUpgrade slirp4netnsUpgrade runcUpgrade git-lfsUpgrade udicaUpgrade python3-criuUpgrade critUpgrade netavarkUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade buildahUpgrade libslirpUpgrade go-toolsetUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade golang-docsUpgrade buildah-testsUpgrade aardvark-dnsUpgrade golangUpgrade podman-dockerUpgrade podman-catatonitUpgrade podman-testsUpgrade golang-misc | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade go-srpm-macrosUpgrade golang-github-gorilla-mux-develUpgrade golang-sharedUpgrade golist-debuginfoUpgrade go-rpm-macrosUpgrade go-rpm-templatesUpgrade golang-googlecode-sqlite-develUpgrade golang-github-syndtr-gocapability-develUpgrade go-filesystemUpgrade golang-binUpgrade runc-debuginfoUpgrade golangUpgrade golang-googlecode-net-develUpgrade golang-github-godbus-dbus-develUpgrade golang-srcUpgrade runcUpgrade golang-docsUpgrade golang-github-gorilla-context-develUpgrade golang-testsUpgrade golang-miscUpgrade golang-github-kr-pty-develUpgrade golang-raceUpgrade golist | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2manUpgrade golist-debuginfoUpgrade golang-docsUpgrade golang-raceUpgrade golist-debugsourceUpgrade golang-testsUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-sharedUpgrade golistUpgrade golang-binUpgrade golangUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-srcUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-miscUpgrade compat-golang-github-cpuguy83-md2man-2-devel | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxyUpgrade conmonUpgrade delve-debugsourceUpgrade python3-podmanUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade podman-testsUpgrade cockpit-podmanUpgrade skopeoUpgrade slirp4netnsUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade libslirp-develUpgrade grafana-debuginfoUpgrade podman-catatonitUpgrade buildahUpgrade toolboxUpgrade buildah-debugsourceUpgrade criu-libsUpgrade podman-pluginsUpgrade golang-miscUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade golang-srcUpgrade criuUpgrade criu-debuginfoUpgrade git-lfs-debugsourceUpgrade skopeo-debugsourceUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade golangUpgrade golang-raceUpgrade buildah-tests-debuginfoUpgrade netavarkUpgrade skopeo-debuginfoUpgrade fuse-overlayfsUpgrade criu-develUpgrade runcUpgrade podman-dockerUpgrade criu-debugsourceUpgrade runc-debuginfoUpgrade golang-docsUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade podman-plugins-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade delveUpgrade containernetworking-pluginsUpgrade podmanUpgrade grafanaUpgrade git-lfs-debuginfoUpgrade buildah-testsUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade critUpgrade go-toolsetUpgrade conmon-debuginfoUpgrade crun-debugsourceUpgrade grafana-pcpUpgrade criu-libs-debuginfoUpgrade aardvark-dnsUpgrade podman-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debugsourceUpgrade grafana-pcp-debuginfoUpgrade libslirp-debuginfoUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade udicaUpgrade skopeo-testsUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debugsourceUpgrade git-lfsUpgrade podman-remote | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade libslirpUpgrade python3-criuUpgrade criu-libsUpgrade delveUpgrade grafanaUpgrade criu-develUpgrade crunUpgrade slirp4netnsUpgrade go-toolsetUpgrade git-lfsUpgrade containers-commonUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade container-selinuxUpgrade podman-testsUpgrade golang-srcUpgrade skopeo-testsUpgrade conmonUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade golang-miscUpgrade golangUpgrade fuse-overlayfsUpgrade critUpgrade podmanUpgrade grafana-pcpUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade udicaUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade golang-testsUpgrade criuUpgrade python3-podmanUpgrade golang-raceUpgrade golang-binUpgrade runcUpgrade netavarkUpgrade skopeoUpgrade buildah-testsUpgrade podman-remoteUpgrade buildah | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade golang-testsUpgrade toolbox-testsUpgrade criu-libsUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade podman-catatonitUpgrade crun-debugsourceUpgrade podman-remoteUpgrade conmon-debuginfoUpgrade podman-remote-debuginfoUpgrade golang-srcUpgrade fuse-overlayfs-debugsourceUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade golang-raceUpgrade grafana-debuginfoUpgrade podmanUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade python3-podmanUpgrade netavarkUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade criuUpgrade git-lfs-debuginfoUpgrade crun-debuginfoUpgrade delve-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade grafana-pcpUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade golangUpgrade buildahUpgrade golang-miscUpgrade cockpit-podmanUpgrade golang-binUpgrade udicaUpgrade conmonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delve-debugsourceUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade git-lfsUpgrade podman-pluginsUpgrade podman-testsUpgrade libslirp-debuginfoUpgrade podman-gvproxyUpgrade podman-catatonit-debuginfoUpgrade podman-plugins-debuginfoUpgrade toolboxUpgrade runcUpgrade git-lfs-debugsourceUpgrade slirp4netns-debugsourceUpgrade grafana-pcp-debuginfoNo solution existsUpgrade runc-debuginfoUpgrade podman-dockerUpgrade golang-docsUpgrade container-selinuxUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-debuginfoUpgrade libslirpUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade skopeoUpgrade critUpgrade podman-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netnsUpgrade crunUpgrade slirp4netns-debuginfoUpgrade grafanaUpgrade go-toolsetUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade podman-debugsourceUpgrade delve | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade libslirpUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-raceUpgrade criu-develUpgrade delve-debugsourceUpgrade criuUpgrade git-lfs-debugsourceUpgrade grafana-pcp-debuginfoUpgrade delveUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade criu-debugsourceUpgrade golang-binUpgrade grafana-debuginfoUpgrade git-lfsUpgrade delve-debuginfoUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade git-lfs-debuginfoUpgrade golangUpgrade grafanaUpgrade grafana-pcpUpgrade go-toolsetUpgrade criu-libsUpgrade critUpgrade python3-criuUpgrade libslirp-devel | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-opensslUpgrade go1.17-docUpgrade go1.18-docUpgrade go1.18Upgrade go1.18-openssl-raceUpgrade go1.17Upgrade go1.18-openssl-docUpgrade go1.17-raceUpgrade go1.18-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.18-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.13-goUpgrade golang-1.18-goUpgrade golang-1.18Upgrade golang-1.13Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub